Sub-processors
This list names the providers that process customer data to run the service. It is kept in step with the product. A lawyer has not yet reviewed the surrounding terms.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, sign-in, realtime messaging | Account data, workspace content, audit records |
| Vercel | Web application hosting | Requests to the web application |
| Fly.io | Background worker and virus scanning | Queued jobs, uploaded files while they are scanned |
| Cloudflare (R2) | File storage | Uploaded files, workspace exports |
| Stripe | Payments and subscriptions | Billing contact, subscription and payment details |
| OpenRouter | AI model routing for the credits plan, zero-retention providers only | Prompts and replies for assistant runs |
| Anthropic | AI model provider for workspaces that bring their own key | Prompts and replies for assistant runs |
| OpenAI | Embeddings for search, and AI models for workspaces that bring their own key | Text sent for indexing, prompts and replies |
| Composio | Connections to apps a member chooses to connect | Tool calls and tokens for connected apps |
| Resend | Email delivery | Recipient address, email content |
| Sentry | Error monitoring, with request bodies and prompts scrubbed | Error details, no message content |
| Upstash | Rate limiting | Request counters keyed by address or account |
Slack and Discord are customer-chosen bridges. They receive only the messages a workspace sends through a bridge it set up.
Changes
Placeholder. The notice period for changes is to be set by the lawyer-approved terms.